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Docket No. RSW9-2000-0089-US1 
CLAIMS : 

What is claimed is: 

1. A method in a data processing system fop/making an 

information request, comprising: 

sending a first request for inforrriation and a 

credential to a server to establish/a sessions- 
receiving a session ident if ideation and the information 




from the server; and 

sending a second 
credential and the ses 




ist^lf or information and the 

Lcation to the server. 



2. The method of claimX-i, therein the credential is a user 
name and password, a /Security token, or a certificate. 
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3 .The method of^claim 1, wherein the session 
identification i/s in a session identification data 
structure . 

4. The mejfhod of claim 3, wherein the session 
identification data structure is a session identification 
cookie, 




1 5. /The method of claim 4, further comprising storing the 

2 sjession identification cookie. 
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6. The method of claim 3, whereir^he session 
identification data stJ^ucture^is^ Ln a rewritten uniform 
resource locator . 




1 7. The method of claim 1, wherein the request is a 

2 hypertext tralisport protocol request . 



1 8. Tjt€^ method of claim 7, wherein the hypertext transport 

2 pn^ocol request is a uniform resource locator. 



1 
2 
3 
4 



6 



10 

11 

12 
13 



9 . A method in a data 



processing system for managing an 



information request, cjDmprising 
establishing a s^sion; 

generating a session identification in response to the 

session being establismed; 

sending the sessiln identification to the client; 
receiving a request for information and a credential 

and the session identifsLcation from a clients- 
determining whethef the session identification is 

valid; 

determining whethed the credential is valid; 
sending the informajtion to the client in response to 
the session identification and the credential being valid. 
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10. The method of claim 9, wherein the credential is a 
user name and password, a security token, or a certificate. 




23 



Docket No. RSW9-2000-0089-US1 

1 11. The method of claim 9, further comprising: 

2 associating a user account with the session 

3 identification in response to the credential being valid. 

1 12. The method of claim 9, wherein the step of generating 

2 a session identification comprises generating a random 

3 number. 

1 13. The method of claim 9, wherein the step of generating 

2 a session identification comprises generating a session 

3 identification data structure, 

1 14. The method of claim 13, wherein the session 

2 identification data structure is a session identification 

3 cookie. 

1 15. The method of claim 13, wherein the session 

2 identification data structure is in a rewritten uniform 

3 resource locator. 

1 16. The method of claim 9, wherein the request is a 

2 hypertext transport protocol request . 

1 17. The method of claim 16, wherein the hypertext 

2 transport protocol request is a uniform resource locator. 
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18. A method in a data processing system ^fc^ making an 
information request, comprising: 

sending a request for informat^ion and a session 
identification and a cr^<iential<^o a server; and 
receiving the inf ^rrfati^^^ f rom the server. 
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1 19. The method of cl-aim 18, wherein credential is a user 

2 name and password,/^ security token, or a certificate. 




1 20. The method of claim 18, wherein the request is a 

2 hypertextytransport protocol request. 



1 21. yrhe method of claim 20, wherein the hypertext 

2 transport protocol request is a uniform resource locator. 



1 22. A method in a data processing system for managing an 

2 information request, comprising: 

3 receiving a request for information and a session 

4 identification and a first credential from a client; 

5 determining whether the session identification is 

6 valid; 

7 retrieving a session data structure including a second 

8 crede ntial in response to the session identification being 

9 valid; 
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determining whether the first credential and the 



11 



second credential match; and 



12 



fulfilling the request for information in response to 



13 the first credential and the second credential matching. 

1 23. The method of claim 22, wherein the first credential 

2 is a user name and password, a security token, or a 
^ 3 certificate. 

m 1 24. The method of claim 22, wherein the step of generating 

/i 2 a session identification comprises generating a random 

N 3 number. 

^ 1 25. The method of claim 22, wherein the step of generating 
fy 2a session identification comprises generating a session 

n 3 identification data structure. 



1 26. The method of claim 25, wherein the session 

2 identification data structure is a session identification 

3 cookie . 

1 27. The method of claim 25, wherein the session 

2 identification data structure is in a rewritten uniform 

3 resource locator. 
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1 28. The method of claim 22, wherein the request is a 

2 hypertext transport protocol request. 

1 29. The method of claim 28, wherein the hypertext 

2 transport protocol request is a uniform resource locator 

1 30. An apparatus for making an informati^ request, 

2 comprising: 

3 first sending means for sending a first request for 

4 information and a credent^flrsi. toya server to establish a 



6 ^ 



e1 5 session; 

6 receipt means for rjec^^j^ng a session identification "c^ 

E 7 and the information troxydme server; and 

Ti 8 second sending means for sending a second request for 

9 information and the/credential and the session 

□ 10 identification to/the server. 

1 31. The appa^ratus of claim 30, wherein the credential is a 

2 user name /nd password, a security token, or a certificate. 

1 32. Jjme apparatus of claim 30, wherein the session 

2 identification is in a session identification data 

3 sxructure . 
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33. The apparatus of claim 32, wherein the sessio^ 
identification data structure is a session iden^te^f ication 
cookie . 



34. The apparatus of claim 33, fiir^tTier comprising storage 
means for storing the sessifo]/ ication cookie 



35. The apparatus of cla'mi/32, wherein the session 
identification data ^fe^ucture is a rewritten uniform 
resource locator. 



36. The appafratus of claim 30, wherein the request is a 
hypertextytransport protocol request. 



37. y/The apparatus of claim 36, wherein the hypertext 
ransport protocol request is a uniform resource locator, 

38. An apparatus for maiiaging an information request, 
comprising : 

session means for establishing a session; 

generating means foi generating a session 
identification in responds to the session being 
established; \ 

first sending means fior sending the session 
identification and to -the Icli ent ; 




28 

Docket No. RSW9-2000-0089-US1 



9 receipt means for receiving a request for information 

10 and a credential and the session identification from the 

11 client; 

12 first determining means for determining whether the 

13 session identif icatin is valid; 

14 second determining means for determining whether the 

15 credential is valid; and 

16 second sending means for sending the information to 



17 the client in response to the session identification and 

18 the credential being valid. 

1 39. The apparatus of claim 38, wherein the credential is a 

2 user name and password, a security token, or a certificate. 

1 40. The apparatus of claim 38, further comprising: 

2 association means for associating a user account with 

3 the session identification in response to the session 

4 identification being generated. 

1 41. The apparatus of claim 38, wherein the generating 

2 means comprises means for generating a random number. 

1 42. The apparatus of claim 38, wherein the generating 

2 means comprises means for generating a session 

3 identification data structure. 
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1 43. The apparatus of claim 42, wherein the session 

2 identification data structure is a session identification 

3 cookie . 

1 44. The apparatus of claim 42, wherein the session 

2 identification data structure is in a rewritten uniform 

3 resource locator. 

1 45. The apparatus of claim 38, wherein the request is a 

2 hypertext transport protocol request. 

1 46. The apparatus of claim 45, wherein the hypertext 

2 transport protocol request is a uniform resource locator. 

1 47. An apparatus for making an inf ormati^^^quest , 

2 comprising: 

3 a processor; and 

4 a memory electrically oomi€cted to the processor, the 

5 memory having stored theneiM^ ayprogram to be executed on 

6 the processor for perf orralrig: 

7 sending a requea^ f or information and a session 

8 identification and^ credential to a server; and 

9 receiving fefne information from the server. 

1 48. The apparatus of claim 47, wherein credential is a 

2 user n^e and password, a security token, or a certificate, 
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1 49. The apparatus ot/c'^Jtxa ^r, wherein the request is a 

2 hypertext transport^ff^/c&€ol request. 

1 50. The apparatus of claim 49, wherein the hypertext 

' :7^'"""' '■ * ™ '"'■"'^ 

1 51. An apparatus for managing an information request, 

2 comprising: 

3 a processor; and 

4 a memory electrically connected to the processor, the 

5 memory having stored therein a program to be executed on 

6 the processor for performing: 

7 receiving a request for information and a session 

8 identification and a first credential from a client; 

9 determining whether the session identification is 

10 valid; 

11 retrieving a session data structure including a second 

12 credential in response to the session identification being 

13 valid; 

14 determining whether the first credential and the 

15 second credential match; and 

16 fulfilling the request for information in response to 

17 the first credential and the second credential matching. 
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1 52. The apparatus of claim 51, wherein the first 

2 credential is a user name and password, a security token, 

3 or a certificate, 

1 53. The apparatus of claim 51, wherein the step of 

2 generating a session identification comprises generating a 

3 random number. 

1 54. The apparatus of claim 51, wherein the step of 

2 generating a session identification comprises generating a 

3 session identification data structure . 

1 55. The apparatus of claim 54, wherein the session 

2 identification data structure is a session identification 

3 cookie. 

1 56. The apparatus of claim 54, wherein the session 

2 identification data structure is in a rewritten uniform 

3 resource locator. 

1 57, The apparatus of claim 51, wherein the request is a 

2 hypertext transport protocol request . 
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58, The apparatus of claim 57, wherein the hypertext 
transport protocol request is a uniform resource locator. 
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1 59. A computer program product, in a^^^pdfnputer readable 

2 medium, for making an information^-^quest , comprising: 

3 instructions for sen(M}^^ first request for 

4 information and a credemM^^ a server to establish a 

5 session; >a ^ 

6 instruction^^or receiving a session identification 

7 and the infopftation from the server; and 

8 inst^ctions for sending a second request for 

9 inforpj^ion and the credential and the session 
10 icWitif ication to the server. 
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60. A computer program 
medium, for managing an 
instructions for e 



product, in a computer readable 
information request, comprising: 
tablishing a session; 
instructions for generating a session identification 
in response to the sessilon being established; 

instructions for s^^ding the session identification to 
the client; 

instructions for refceiving a request for information 
and a credential and the I session identification from a 
client ; 

instructions for determining whether the session 
identification is valid; 

instructions for determining whether the credential is 
valid; 
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15 instructions for sending the information to the client 

16 in response to the session identification and the 

17 credential being valid. 



1 61. A computer program product^^-^f^ computer readable 

2 medium, for making ap^nfp3^^3ition request, comprising: 

3 instructions fJaH^gsra a request for information and 

4 a session idenfedTfication and a credential to a server; and 

5 insj^ifuctions for receiving the information from the 

6 serj 

1 62. A computer program product, in a computer readable 

2 medium, for managing an information request, comprising: 

3 instructions for receiving a request for information 

4 and a session identification and a first credential from a 

5 client; 

6 instructions for determining whether the session 

7 identification is valid; 

8 instructions for retrieving a session data structure 

9 including a second credential in response to the session 

10 identification being valid; 

11 instructions for determining whether the first 

12 credential and the second credential match; and 

13 instructions for fulfilling the request for 

14 information in response to the first credential and the 

15 second credential matching. 
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